Description
The server supports authentication methods in which credentials are sent in plaintext over unencrypted channels. If an attacker were to intercept traffic between a client and this server, the credentials would be exposed.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
SICK AG SICK Media Server
Default version status: affected
all versionsaffected
References
- https://sick.com/psirt ↗
- https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF ↗
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices ↗
- https://www.first.org/cvss/calculator/3.1 ↗
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.pdf ↗
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.json ↗